Ignition Client Blocked by Java Security Settings (Certificate Expired)
Posted by Dave Fogle, Last modified by Dave Fogle on 12/06/2018 03:01 PM
Ignition uses a technology called Java Webstart for launching clients from the Gateway. When a jar file used to launch a client is downloaded from the Gateway Java checks the certificate that was used to sign the jar file to see if it's valid or not, and if the certificate doesn't pass this check then depending on the version of Java running on the client a warning is either displayed or the client is also prevented from executing. As of February 15th, 2016 16:00:00 PST (November 29th, 2018 16:00:PST for additional versions listed now below) the certificate used to sign some older versions of Ignition will have expired and launching clients via webstart may not be possible without intervention. If you run across one of the following error/warning messages or any similar errors, then you are currently running a version of Ignition that was signed with the expired certificate. Sometimes these error messages will allow you to check a few boxes that let you bypass the warning and launch a client. Other times you will be unable to launch a client at all.
(Expired on Nov. 29, 2018)
Workarounds and Fixes
For situations where the warning/error does not allow you to bypass it and launch a client, there are several options you have at your disposal to get around these errors when/if you encounter them. One option is applied on the gateway side, and the other solutions are applied to the client side. You only need to choose one of these workarounds, but if you choose one of the clientside options you'll have to apply that workaround to each client machine that you need to launch an Ignition client on.
1) Upgrading Ignition to the newest stable version within your current branch or the newest version in the next closest LTS branch that's higher than what's currently installed.
2) Use the Ignition Native Client Launcher (Preferred)
3) Edit Java security settings via the Java Control Panel. Any or all of these settings may need to be changed depending on the case.